yq Info

yq was added to epel10 repo on 2025-09-06
Page updated: 2025-11-12 13:03
Repo Status - Overall Status

Source NVR: yq-4.47.1-2.el10_2 (2025-09-06)

Binary Packages

yq yq-4.47.1-2.el10_2

Bugs

2398316 NEW CVE-2025-47910 yq: CrossOriginProtection bypass in net/http [epel-10]
2398954 NEW CVE-2025-47906 yq: Unexpected paths returned from LookPath in os/exec [epel-10]
2407502 NEW CVE-2025-58189 yq: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-10]
2408954 NEW CVE-2025-61723 yq: Quadratic complexity when parsing some invalid inputs in encoding/pem [epel-10]
2409896 NEW CVE-2025-58185 yq: Parsing DER payload can cause memory exhaustion in encoding/asn1 [epel-10]
2410836 NEW CVE-2025-58188 yq: Panic when validating certificates with DSA public keys in crypto/x509 [epel-10]

Install Failures